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5 BACKGROUND OF THE INVENTION 

(1) Field of the Invention 

The present invention relates to a management apparatus 
that manages data processing performed between terminal 
apparatuses on a network formed of the terminal apparatuses, such 
10 as personal computers and information terminals, and also relates 
to a terminal apparatus. 

(2) Description of the Related Art 

In recent years, by way of a network that is formed by 

15 mutually connecting a plurality of terminal apparatuses, a system 
known as the ''peer to peer" networking has been employed. With 
this system, chargeable contents files and information that requires 
the copyright protection are exchanged between terminal 
apparatuses s uch as personal computers or the like. For this 

20 exchange of data such as a contents file between the terminal 
apparatuses, a conventional system, where a server apparatus 
uniquely stores, manages, and then sends data to a requester 
terminal apparatus, is not employed. The data is exchanged 
between a terminal apparatus serving as a contents holder or the 

25 like and a requester terminal apparatus that requests for the 
processing. Therefore, when the chargeable Information delivery 
service is executed between the terminal apparatuses, it becomes 
important that only the information approved by the contents holder 
or copyright holder is delivered. 

30 A method has been provided, by which a management 

apparatus is set in the system via a network bus to manage the 
validity of the data exchange performed between the terminal 



apparatuses. Fig. 20 shows the overall configuration of 
conventional data management performed among a management 
apparatus 2001 and terminals via a network bus. 

In Fig. 20, a requester terminal 2003 notifies the 
5 management apparatus 2001 that a desired contents file is ''music. 
mp3", for example. The management apparatus 2001 then refers 
to a list of request reception terminals including a request reception 
terminal 2002 and conducts a search for the request reception 
terminal 2002 that has the requested file "'music. mp3". Then, the 
10 management apparatus 2001 sends the search result to the 
requester terminal 2003 that requests for the delivery, via the 
network. Accordingly, the requester terminal 2003 can begin the 
data exchange with the request reception terminal 2002 that has the 
file ''music. mp3". 

15 There is also a method called digital watermarking as an 

example to verify and deliver only the valid information from a 
terminal to another without using a server apparatus. With this 
digital watermarking, information denoting the validity of data in 
question can be embedded as a watermark without giving any 

20 influence on the data itself. 

Also, there is another method by which a terminal apparatus 
checks the type of registered information and information of a 
non-defined type is rejected for registry (see Japanese Laid-Open 
Patent Application No. 07-105290, for example). This patent 

25 document 1 discloses that when data of a type different from the set 
document data type is inputted, the data is rejected for registry and 
that an input of false document data is accordingly prevented with 
accuracy. 

Moreover, for the exchange of contents files, it is now 
30 common practice to employ a system where an apparatus called an 
authentication server is provided on a network to uniquely manage 
contents files and judge for each user terminal whether the terminal 
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is to be authorized to receive information, and then the server 
apparatus sends the contents file which the terminal requested for. 

However, by means of the above-mentioned method for 
managing the data exchange between the terminals using the 
5 management apparatus shown in Fig. 20, the management 
apparatus only locates which terminal Is to be the delivery source, 
meaning that the substantial file exchange is performed directly 
between the terminals. For this reason, there may be a risk that 
file information causing an infringement of a copyright is exchanged 

10 between the terminals or that an unauthorized virus file is sent to 
the terminal apparatus serving as the delivery source. Also, even if 
data exchange is freely performed between the terminals via the 
network, the management apparatus is incapable of conducting the 
management such as prevention of unauthorized performances. 

15 Meanwhile, if employing the digital watermarking method as 

stated above, the terminal will be under heavy load for verifying the 
''watermark," resulting in a decrease in the processing speed. 

Moreover, by means of the method disclosed in the patent 
document 1, the terminal apparatus itself verifies the validity of the 

20 inputted data, ending up processing even unauthorized data. 

Furthermore, in the stated case where the authentication 
server is used for managing the data exchange between the 
terminals, the authentication server uniquely manages data and 
performs all the processes including authentication and necessary 

25 delivery, so that processing load given to the authentication server 
is increased due to concentrated accesses to the server. Also, a 
problem has arisen that once a delivery source terminal is 
authorized, the authentication server does not have a way of 
knowing exactly what kind of data is delivered, when a 

30 members-only network is employed for chargeable contents delivery, 
for example. 

It is an object of the present invention to solve the stated 
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conventional problems. Also, it is an object to provide a 
management apparatus and terminal apparatuses for a case where 
data to be processed between the terminal apparatuses is managed 
using the management apparatus, wherein the management 
5 apparatus manages data processing executed between the terminal 
apparatuses without increasing processing load of these terminal 
apparatuses and Itself, and wherein unauthorized data processing Is 
prevented from being performed between the terminal apparatuses 
so that the data delivery can be executed with ensured safety. 

10 

SUMMARY OF THE INVENTION 

To solve the stated problems, a management apparatus of the 
present invention is provided with: a reception unit operable to 
receive a request signal from one of the terminal apparatuses that 

15 requests for the data processing; and a verification unit operable to 
verify validity of data relevant to the data processing when receiving 
the request signal. The verification unit verifies the validity of the 
data using at least a part of Information of the data. The 
management apparatus Is further provided with: an Issuing unit 

20 operable to Issue a granting signal to the terminal apparatus when 
the validity of the data is verified by the verification unit, and Issue 
a denying signal to one of the terminal apparatus that performs the 
data processing and another terminal apparatus that Is requested to 
perform the data processing or both the terminal apparatus and the 

25 other terminal apparatus when the validity of the data Is not verified 
by the verification unit; and a transmission unit operable to transmit 
one of the granting and denying signals to the terminal apparatus. 
More preferably, the management apparatus is further provided 
with: a download unit operable to download the data, which is to be 

30 processed between the terminal apparatuses, from the terminal 
apparatus; an extraction unit operable to extract at least a part of 
Information for each set of the downloaded data; a storage unit 
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operable to store the information extracted by the extraction unit; 
and a response requesting unit operable to send a response request 
to a request reception terminal, which is requested to perform the 
data processing, for a response with information relevant to first 
5 information stored in the storage unit, wherein the verification unit 
verifies the validity of the data by comparing the first information to 
second information sent from the request reception terminal 
apparatus responding to the response request. 

With this construction, after receiving the authorization 

10 request signal from the terminal that starts the processing, the 
management apparatus verifies the validity of data to be delivered 
between the terminals using the verification unit and. If the 
verification is positive, sends a granting signal to the requester 
terminal. Thus, the management apparatus can manage the data 

15 delivery executed between the terminals, according to the granting 
signal. 

Also, because the verification unit performs the verification 
processing using a part of the processing object data, the 
management apparatus does not need to store or manage the whole 

20 of data, thereby reducing the load of the verification processing. 
The terminal apparatus of the present Invention Is provided with: a 
reception unit operable to receive a request for the data processing; 
a second issuing unit operable to Issue a request signal requesting 
for the data processing; and a second transmission unit operable to 

25 transmit the request signal to the management apparatus. The 
terminal apparatus is further provided with: a second storage unit 
operable to store data relevant to the data processing; a readout 
unit operable to read out, when a response request for a response 
with information regarding at least a part of the data is received 

30 from the management apparatus, relevant information relevant to 
the response request from the second storage unit; and a response 
unit operable to respond to the management apparatus with the 
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relevant information read out by the readout unit. More preferably, 
the terminal apparatus is further provided with: a second reception 
unit operable to receive one of granting and denying signals from 
the management apparatus, the signals respectively indicating that 
5 the data processing to be performed with the other terminal 
apparatus is authorized and unauthorized; a judgment unit operable 
to judge that the data processing performed with a request 
reception apparatus, that is requested to perform the data 
processing, is to be started when the granting signal is received, and 

10 judge that the data processing performed with the request reception 
terminal is not to be performed when the denying signal is received; 
and a data processing unit operable to perform the data processing 
with the other terminal apparatus in accordance with details 
authorized by the management apparatus when the granting signal 

15 is received - 

With this construction, the terminal apparatus of the present 
invention generates a process authorization request signal and 
sends it to the management apparatus when wishing to perform the 
data processing with another terminal apparatus. When receiving 

20 the response request for the relevant .information from the 
management apparatus, the terminal apparatus generates the 
relevant information and responds with it to the management 
apparatus. Moreover, the terminal apparatus can begin the 
processing with the other terminal apparatus only when receiving 

25 the granting information from the management apparatus. 
Accordingly, unauthorized data processing is prevented, and the 
data exchange can be performed with safety ensured by the 
management apparatus. 

It should be understood that the present invention can be 

30 realized not only by the above-stated management apparatus and 
the terminal apparatus. The present invention can be applied to: a 
management system where the management apparatus and the 
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terminal apparatuses are connected via a network; a management 
method having steps corresponding to the units provided in the 
management apparatus; and to a program realizing the 
management method using a computer or the like. This program 
5 can be distributed via a record medium such as a DVD and CD-ROM, 
or via a transmission medium such as a communication network. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Fig.l is a block diagram showing an example construction of a 
10 management system employed for data processing performed 
between terminals in a first embodiment of the present invention. 

Fig. 2 is a detailed functional block diagram of a management 
apparatus in the first embodiment. 

Fig. 3 is a detailed functional block diagram of a requester 
15 terminal in the first embodiment. 

Fig. 4 is a detailed functional block diagram of a request 
reception terminal in the first embodiment. 

Fig. 5 is a sequence diagram illustrating a general data flow in 
the overall management system in the first embodiment. 
20 Figs. 6 (a) - (c) show constructions of data exchanged among 

the management apparatus, the requester terminal, and the request 
reception terminal of the management system in the first 
embodiment. 

Fig. 7 is a flowchart showing an operational procedure 
25 executed between the instant when the management apparatus 
receives a delivery authorization request signal from the requester 
terminal and the instant when the management apparatus sends a 
delivery granting signal to the requester terminal in the first 
embodiment. 

30 Fig. 8 is a flowchart showing an operational procedure 

executed between the instant when the requester terminal sends an 
authorization request signal to the management apparatus and the 
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instant when the requester ternninal issues a delivery request in the 
first ennbodiment. 

Fig. 9 is a flowchart showing an operational procedure 
executed between the instant when the request reception terminal 
5 receives a data verification signal fronn the management apparatus 
and the instant when the request reception terminal delivers the file 
information to the requester terminal in the first embodiment. 

Fig. 10 is a flowchart showing an operational procedure 
executed when a file generated by the request reception terminal 
10 that is a contents holder is uploaded to the management apparatus 
in the management system in the first embodiment. 

Fig. 11 is a functional block diagram of the management 
apparatus that Is provided with a relevant information extraction 
unit. 

15 Fig. 12 is a functional block diagram of a processing terminal 

that is provided with both an authorization request signal issuing 
unit and a data verification unit. 

Fig. 13 is a functional block diagram of a management system 
that is composed of a management apparatus, a requester terminal, 
20 and a request reception terminal in a second embodiment of the 
present invention. 

Fig. 14 is a flowchart showing an operational procedure from 
the reception of an authorization request to the issue of granting 
information by the management apparatus in the second 
25 embodiment. 

Fig. 15 a reference diagram of data stored in a data 
registration unit. 

Fig. 16 is a block diagram showing the overall construction of 
a management system in a third embodiment. 
30 Fig. 17 is a sequence diagram Illustrating a general data flow 

in the management system in the third embodiment. 

Fig. 18 shows an example data construction of a process 
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authorization request signal sent from the requester terminal to the 
request reception terminal in the third embodiment. 

Fig. 19 shows the overall construction of a management 
system employed for remote maintenance in a fourth embodiment. 
5 Fig. 20 is a block diagram showing the overall configuration of 

conventional data management achieved among a management 
apparatus and terminals via a network bus. 

DESCRIPTION OF THE PREFERRED EMBODIMENT 

10 The following is a description of a management system of the 

present invention, with reference to the accompanying drawings. 
Note that the following explanation and the drawings are only 
examples, and the present invention is not limited to the 
embodiments below. Thus, although an explanation will be given 

15 for a case where contents of music and motion video files are 
delivered between the terminals in the embodiments below, 
processing performed between the terminals is not limited to the 
delivery and other performances such as movement and deletion of 
the file information are possible. 

20 

(First Embodiment) 

Fig.l is a block diagram showing an example construction of a 
management system employed for data processing executed 
between terminals in the first embodiment of the present invention. 

25 This management system of the first embodiment is composed of a 
requester terminal 110, a request reception terminal 120, and a 
management apparatus 100 that manages file information that is to 
be delivered between the requester terminal 110 and the request 
reception terminal 120, and a network bus 130 by way of which 

30 these apparatus and terminals are mutually connected. The 
management apparatus for managing the file information that is to 
be delivered between the terminals is composed of: a 
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communication unit 101 for communicating with the requester 
terminal 110 and the request reception terminal 120 via the 
network; a request signal reception unit 102 for receiving a process 
authorization request signal sent from the requester terminal 110; 
5 an Information transmission unit 103 for transmitting a granting or 
denying signal to the requester terminal 110 and the request 
reception terminal 120 in accordance with the verification result 
given by a data verification unit 105; a request signal processing 
unit 104 for processing the process authorization request signal 

10 received by the request signal reception unit 102; and a data 
verification unit 105 for verifying the contents and validity of data 
that is to be processed between the terminals. 

The requester terminal 110 that issues a request signal to the 
management apparatus 100 to acquire the file information from 

15 another terminal is composed of: a communication unit 111 for 
communicating with the request reception terminal 120 and the 
management apparatus 100; an information reception unit 112 for 
receiving granting or denying Information issued from the 
management apparatus 100; a request signal issuing unit 113 for 

20 issuing a process authorization request signal to the management 
apparatus 100; and a data processing unit 114 for performing the 
data processing in accordance with the authorized details given by 
the management apparatus 100. 

The request reception terminal 120 that holds file information 

25 is composed of: a communication unit 121 for communicating with 
the requester terminal 110 and the management apparatus 100; an 
information reception unit 122 for receiving granting or denying 
information issued from the management apparatus 100; a data 
verification unit 123 for processing a data verification signal sent 

30 from the management apparatus 100; and a data processing unit 
124 for responding to a request from the management apparatus 
100. 
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Fig. 2 is a detailed functional block diagram of the 
management apparatus 100 in the first embodiment. 

The data verification unit 105 is composed of: a relevant 
information confirmation unit 105a for confirming contents of a 
5 process authorization request signal sent from the request signal 
processing unit 104; a relevant information readout unit 105b for 
reading out the Information from a database of the management 
apparatus 100; a relevant information transmission request unit 
105c for requesting the request reception terminal 120 that has the 

10 relevant information for a response of the relevant information; a 
relevant information reception unit 105d for receiving the response 
to the request from the request reception terminal 120; and a 
relevant information comparison unit 105e for comparing the 
relevant information held in the management apparatus 100 to the 

15 relevant information included In the response received from the 
request reception unit 120. 

Fig. 3 is a detailed functional block diagram of the requester 
terminal 110 of the first embodiment. 

The data processing unit 114 Is composed of: a process 

20 command generation unit 114a for generating an appropriate 
process command for a process execution unit such as a CPU In 
accordance with details of the authorized Information given by the 
management apparatus 100; a process command reception unit 
114b for receiving a command related to processing that is inputted 

25 from a user Interface such as a keyboard; and a process command 
confirmation unit 114c for confirming contents of the command 
inputted from the user interface. Here, the command received by 
the process command reception unit 114b is a request for the 
delivery of a specific motion video file, for example. 

30 Fig. 4 is a detailed functional block diagram of the request 

reception terminal 120 in the first embodiment. 

The data processing unit 124 is composed of: a relevant 
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information readout unit 124a for reading out the relevant 
information from the file information that is a processing object in 
accordance with the request from the management apparatus 100; 
and a process command generation unit 124b for generating a 
5 process command according to the process authorization 
information sent from the management apparatus 100. 

Upon the receipt of the processing data from the data 
verification unit 123, the relevant Information readout unit 124a 
confirms the designated file or designated location and then reads 

10 out the data from a data storage unit such as memory. 

When receiving a delivery granting signal from the 
Information reception unit 122, the process command generation 
unit 124b instructs a process execution unit such as a CPU to set the 
process reception commencement state for the file delivery to the 

15 requester terminal 110. When the information reception unit 122 
receives the denying signal, the process command generation unit 
124b generates a command not to receive the processing from the 
requester terminal 110. 

The following Is an explanation of an operational procedure 

20 performed In the management system of the first embodiment as 
described above, with reference to Figs. 5 to 9. 

Fig. 5 Is a sequence diagram Illustrating a general data flow In 
the overall management system of the first embodiment. Note that 
the management apparatus 100 previously acquires file information 

25 that Is to be delivered between the terminals through the 
downloading or the like and registers the file information into the 
database (501), so that the relevant information comparison unit 
105e of the data verification unit 105 can perform the data 
comparison process later on. The management apparatus 100 of 

30 the first embodiment does not register the whole of file information 
that Is to be delivered between the terminals, but as its 
characteristics, the management apparatus 100 extracts at least a 
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part of the file information and registers the extracted part into the 
database. 

First, the requester terminal 110 directs the request signal 
issuing unit 113 to issue a process authorization request signal to 
5 the management apparatus 100 when requiring file information 
from the request reception terminal 120 (502). 

Next, receiving this process authorization request signal, the 
management apparatus 100 directs the relevant information 
transmission request unit 105c to send a response request for 

10 transmission of the relevant information to the request reception 
terminal 120 in order to verify the validity of the relevant file 
information that is to be delivered (503). The relevant information 
mentioned here is a value at the specific location or the like of the 
relevant information to be delivered. 

15 When receiving the relevant information response request 

from the management apparatus 100 (503), the request reception 
terminal 120 directs the relevant information readout unit 124a to 
read out the relevant information from the file information, and then 
responds with the relevant information to the management 

20 apparatus 100 via the communication unit 121 (504). 

This relevant information received by the relevant 
information reception unit 105d of the management apparatus 100 
is sent to the relevant information comparison unit 105e which 
performs comparison processing to judge whether or not the file 

25 information possessed by the request reception unit 120 is valid. 

If the relevant information registered in the management 
apparatus 100 is in agreement with the relevant information sent 
from the delivery source and the validity is verified, a delivery 
granting signal (505 and 506) is sent to both the requester terminal 

30 110 and the request reception terminal 120 from the management 
apparatus 100. 

Next, upon the receipt of the granting signal (505), the 
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requester terminal 110 sends a delivery request directly to the 
request reception terminal 120 (507). The request reception 
terminal 120, receiving the delivery request (507), performs the 
data delivery of the requested file information to the requester 
5 terminal 110 (508) with reference to the processing described in the 
delivery granting signal (506). Accordingly, the sequential delivery 
processing is terminated here- 

Fig. 6 shows constructions of data delivered among the 
management apparatus, the requester terminal 110, and the 

10 request reception terminal 120 of the management system in the 
first embodiment. 

Fig. 6(a) is an example data construction of a process 
authorization request signal 600 generated by the request signal 
issuing unit 113 of the requester terminal 110 and sent to the 

15 management apparatus 100. The process authorization request 
signal 600 is made up of: a header part 601 including address 
information of a delivery destination and a delivery source; and a 
data part 602 including a user ID 603 of the requester terminal 110 
that Issues the process authorization request signal, a destination 

20 user ID 604 of the request reception terminal 120, a processing 
object file number 605 denoting a file name of the processing object, 
and a processing type number 606 denoting a type of the processing 
that the requester terminal 110 requests the management 
apparatus 100 to authorize. Here, the processing type described in 

25 the processing type number 606 Is delivery, deletion, movement, or 
the like, for example. 

Fig. 6(b) shows the data construction of a relevant 
information response request signal 610 that is generated by the 
relevant information transmission request unit 105c of the 

30 management apparatus 100 and sent to the request reception 
terminal 120. The relevant Information response request signal 
610 is made up of: a header part 611 Including address Information; 
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and a data part 612 including a processing object file number 613 
and response request information 614. The relevant information 
readout unit 124a of the request reception unit 120 reads out the 
relevant part of data from the file information that is to be delivered, 
5 according to the response request information 614, generates a 
response packet 620 including the relevant information, and sends it 
to the management apparatus 100. 

Fig. 6(c) Is an example data construction of the response 
packet 620 that Is generated by the data processing unit 124 of the 
10 requester terminal 120 and sent to the management apparatus 110 
as the relevant information response. The response packet 620 Is 
made up of: a header part 621 including address information; and a 
data part 622 including a processing object file number 623 and 
relevant information 624. 
15 Fig. 7 is a flowchart showing an operational procedure 

executed between the Instant when the management apparatus 100 
receives the delivery authorization request signal from the 
requester terminal 110 and the instant when the management 
apparatus 100 sends a delivery granting signal to the requester 
20 terminal 110. 

First, an explanation Is given for the process authorization 
verification procedure performed by the management apparatus 
100. When the request signal reception unit 102 of the 
management apparatus 100 receives the process authorization 
25 request signal from the requester terminal 110 via the 
communication unit 101 (S701), the request signal processing unit 
104 authenticates the requester terminal 110 based on the user ID 
603 included in the authorization request signal 600 (S702). 

Also, the request signal processing unit 104 obtains the 
30 request reception terminal 120, which has the requested file 
information, from the destination ID 604 and authenticates it 
(S703). The request signal processing unit 104 further Interprets 
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the contents of the process authorization request signal by reading 
out the processing object file number 605 and the processing type 
number 606 (S704 and S705). Here, the processing type number 
606 is ''0" indicating ''delivery/' for example. In the case of a file 
5 movement request, for example, "'2" indicating ''movement" is 
multiplexed into the processing type number 606. As another 
example, in a case where the requester terminal 110 requests for 
"deletion" of the file possessed by the request reception terminal 
120, "1" indicating "deletion" is multiplexed. 

10 Then, the request signal processing unit 104 reads out the 

relevant file data (S706) and, if judging that the file information 
delivery between the terminals 110 and 120 might be authorized, 
requests the data verification unit 105 to perform processing. The 
relevant information confirmation unit 105a of the data verification 

15 unit 105 confirms the contents of the process authorization request 
signal sent from the request signal processing unit 104. 

Following this, the relevant information confirmation unit 
105a confirms the relevant file as well as the request reception 
terminal 120 that has the relevant file, according to the process 

20 authorization request signal. The relevant information readout unit 
105b then reads out the information relevant to the relevant file 
confirmed by the relevant information confirmation unit 105d, from 
the database. 

Moreover, the relevant information transmission request unit 
25 105c generates the relevant information response request signal 
610 and sends it to the request reception terminal 120 in order to 
verify the validity of the relevant file possessed by the request 
reception terminal 120 (S707). 

Next, the relevant information reception unit 105d performs 
30 processing to receive the relevant information response from the 
request reception terminal 120 (S708). When receiving the 
information, the relevant information reception unit 105d sends it to 
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the relevant information comparison unit 105e. The relevant 
information comparison unit 105e compares the information sent 
from the request reception terminal 120 to the information read out 
by the relevant information readout unit 105b. If these sets of 
5 information are In agreement with each other and the received 
information is judged to be valid (YES in S708), the relevant 
information comparison unit 105e judges whether this comparison 
processing should be performed N number of times at several 
locations of data for the verification (S709). As an example method 

10 of the file information verification processing performed by the 
relevant information comparison unit 105e, the request reception 
terminal 120 is requested to send a value at a designated location of 
the file or a specific format part such as a header of the file, and 
based on the partial format information, the relevant information 

15 comparison unit 105e may check whether or not an encryption flag 
is set. 

After completing the judgment processing N number of times 
(YES in S709), the relevant information comparison unit 105e sends 
granting information to the information transmission unit 103, with 

20 the granting information indicating that the data processing 
between the terminals is authorized. On the other hand, if judging 
that the information sent from the request reception terminal 120 is 
not valid (NO in S708), the relevant information comparison unit 
105e sends process denying information to the information 

25 transmission unit 103, with the process denying information 
indicating that the data processing between the terminals is 
unauthorized. 

The information transmission unit 103 sends the process 
granting or denying information sent from the request signal 
30 processing unit 104 or the data verification unit 105 to both the 
requester terminal 110 and the request reception terminal 120 via 
the communication unit 101 (S710 and S711). Note that although 
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the process denying information is sent in S711 in Fig. 7, this step 
does not necessarily need to be perfornned and can be onnitted. 

Next, an explanation is given for an operation performed by 
the requester terminal 110 that issues a process authorization 
5 request signal. Fig. 8 is a flowchart showing an operational 
procedure executed between the instant when the requester 
terminal 100 sends the authorization request signal to the 
management apparatus 100 and the Instant when the requester 
terminal 110 issues a delivery request. 

10 First, the process command reception unit 114b of the data 

processing unit 114 receives a request for file information as well as 
for processing details, with the request being inputted using the 
user interface such as a keyboard. Then, the requester terminal 
110 directs the request signal issuing unit 113 to issue the 

15 authorization request signal (S801). Receiving the inputted 
information, the process command reception unit 114b sends it to 
the process command confirmation unit 114c. 

Out of the received information, the process command 
confirmation unit 114c extracts a command that requires the 

20 authorization from the management apparatus 100, and sends the 
processing details t hat requires the authorization to the signal 
issuing unit 113. 

The signal issuing unit 113 issues the process authorization 
request signal (S802) and sends it to the management apparatus 

25 100 via the communication unit 111. 

When the signal issuing unit 113 issues the process 
authorization request signal and sends It to the management 
apparatus 100, the Information reception unit 112 performs 
reception processing to receive the granting or denying information 

30 that is to be sent from the management apparatus 100 (S803). 

Then, the management apparatus 100 performs the 
verification processing to verify the data validity as stated above. 
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If receiving the delivery granting information (YES in S803), the 
infornnation reception unit 112 notifies the data processing unit 114 
of it. On the other hand, if the delivery granting information is not 
received, the processing goes back to S801 so that the input process 
5 to send the delivery authorization request signal is performed again 
(NO in S803). 

The process command generation unit 114a of the data 
processing unit 114 interprets the granting information sent from 
the information reception unit 112 (S804). In the case of the 

10 denying information (No in S804), the process command generation 
unit 114a issues a delivery disapproving signal (S806). When the 
authorization is granted (YES in S804), the command generation 
unit 114 generates a delivery request signal in accordance with the 
authorized details (S805) and sends it to the request reception 

15 terminal 120. Accordingly, this sequential procedure is terminated 
here- 
Next, an explanation is given for an operational procedure 
that is executed between the instant when the request reception 
terminal 120 of the first embodiment receives a data verification 

20 signal from the management apparatus 100 and the instant when 
the request reception terminal 120 delivers the file information to 
the requester terminal 110, with reference to a flowchart shown in 
Fig 9. 

First, upon the receipt of the data verification signal from the 
25 management apparatus 100 (S901), the relevant information 
readout unit 124a of the data processing unit 124 reads out a value 
at the designated location from the designated file information and 
generates the response packet 620 as the relevant information to 
send to the management apparatus 100 (S902). 
30 Following this, the information reception unit 122 of the 

request reception terminal 120 performs reception processing to 
receive the delivery granting information from the management 
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apparatus 100 (S903). If this reception processing is performed 
(YES in S903), the data verification unit 123 judges whether or not 
the requested file information is allowed to be delivered (S904). If 
the reception processing is not performed (NO In S903), the 
5 information reception unit 122 goes back to S901 again to perform 
the reception processing to receive the data verification signal. 

If judging that the delivery is allowed (YES in S904), the data 
verification unit 123 starts receiving the delivery request from the 
requester terminal 110 (S905)- If the delivery is not allowed (NO in 
10 S904), the data verification unit 123 generates a delivery 
disapproving signal, and does not accept a delivery request from the 
requester terminal 110 (S906). Accordingly, the sequential 
processing performed by the request reception terminal 120 is 
terminated here. 

15 Fig. 10 is a flowchart showing an operational procedure 

executed when a file generated by the request reception terminal 
120 that is a contents holder is uploaded to the management 
apparatus 100 in the management system of the first embodiment. 
First, the request reception terminal 120, which generates or 

20 acquires contents, uploads the file information to the management 
apparatus 100 (SlOOl). This file information is a music or motion 
video file, for example, that is generated by a file generation unit 
1002 provided in the request reception terminal 120 as shown in Fig. 
11. The file information may be purchased from another terminal 

25 apparatus. 

The data verification unit 105 of the management apparatus 
100 verifies the contents of the received file information and 
extracts a part of the file information that is to be used for the 
management later on (S1002). The extracted information is then 
30 stored into the database (S1003). The method of extracting partial 
information is achieved by providing a relevant information 
extraction unit 1101 in the confirmation unit 105 of the management 
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apparatus 100 as shown in Fig. 11, for example. 

As explained so far, the management apparatus 100 of the 
first embodiment is composed of: the request signal reception unit 
102 for receiving a process authorization request signal sent from 
5 the requester terminal 110 that requests for the information 
delivery between the terminals; the relevant information 
transmission ^equest unit 105c for requesting the request reception 
terminal 120 to responds with the information at a designated 
location of the requested file information; the relevant information 

10 extraction unit 1101 for extracting and holding a part out of the data 
that is to be delivered between the terminal apparatuses; and the 
relevant information comparison unit 105e for comparing the 
extracted file information stored in the database to the relevant file 
information included in the response packet 620 sent from the 

15 request reception terminal 120 and for verifying the validity of the 
file information that is to be delivered between the terminais, 

The requester terminal 110 of the first embodiment is 
composed of: the request signal issuing unit 113 for issuing an 
authorization request signal to the management apparatus 100; and 

20 the process command generation unit 114a for generating the 
process command to perform the processing with the other terminal 
apparatus when the granting signal is received from the 
management apparatus 100. 

The request reception terminal 120 is composed of: the 

25 relevant information readout unit 124a for reading out the relevant 
information from the delivery object file that is notified from the 
management apparatus 100 as well as generating the response 
packet 620; and the process command generation unit 124b for 
receiving the delivery granting signal from the management 

30 apparatus 100 and generating the process command to perform the 
processing with the other terminal apparatus. 

For the delivery of file information between the terminals, the 
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requester terminal 110 first sends the process authorization request 
signal to the management apparatus 100 which in turn directs the 
relevant information comparison unit 105e to verify the validity of 
the delivery object file information, so that the authorized data 
5 delivery can be performed between the terminals only after the 
management apparatus 100 sends the delivery granting information 
to the requester terminal 110 and the request reception terminal 
120. Thus, unauthorized file information delivery between the 
terminals can be prevented, and the management system is 

10 accordingly realized with ensured safety. 

Moreover, for the management of file information that is to be 
delivered between the terminals, the management apparatus 100 
does not manage the whole of delivery object file but extracts at 
least a part of the file information for the verification processing. 

15 As a result, the process load of the management apparatus 100 can 
be reliably reduced, and the management apparatus 100 can be 
saved from having to store and manage all of the contents the way 
a conventional server apparatus has to. Also, because the 
management apparatus 100 always verifies the validity of file 

20 information that is to be delivered, no area needs to be provided 
specifically for the data verification in the terminal apparatuses. 
Therefore, resources and load of the requester terminal 110 and the 
request reception terminal 120 are reduced, resulting in the 
increase of the network reliability. 

25 Regarding the delivery of file information between the 

management apparatus 100 and the terminals, not the entity of file 
information but only the authorization signals are exchanged. Thus, 
the delivery and management of mass files are unnecessary. 
Consequently, processing performed by the management apparatus 

30 100 is significantly lightened and file information can be safely 
delivered between the terminals. 

Furthermore, by registering the file information to the 
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management apparatus 100, the request reception unit 120 can 
achieve the delivery of safe file information with the other terminal 
apparatus via the network. As a result, unauthorized duplication is 
prevented, and users can safely perform the file exchange. 
5 The management apparatus 100 registers the name for each 

set of processing information to the database so as not to process 
file information that has not been pre-registered under 
authorization. This feature enhances the safety of the network 
employed between the terminals, 

10 The management apparatus 100 also registers the contents of 

the processing information which will be used for the verification, 
thereby increasing the validity of the processing information. 

Note that, as shown in Fig. 12, the processing terminal 1200 
can be provided with both a request signal issuing unit 113 for 

15 issuing an authorization request signal and a data verification unit 
123 for responding with the relevant information. 

With both the request sending and receiving functions, when 
receiving a delivery of file information from a terminal apparatus 
such as a requester terminal that also serves as a contents holder, 

20 the processing terminal 1200, in turn, functions as a request 
reception terminal and can deliver the previously-received file 
Information to a requester terminal under the authorization of the 
management apparatus 100. 

In the first embodiment, after the delivery authorization is 

25 granted, it is the requester terminal 110 that accesses to the 
request reception unit 120 to perform the delivery processing. 
However, the management apparatus 100 may multiplex the 
information of the requester terminal 110 into the granting 
information that is to be sent to the request reception unit 120, so 

30 that the delivery processing to deliver the file information may be 
started by the request reception terminal 120. 

The management apparatus 100 of the present invention can 
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also receive a delivery request from the request reception terminal 
120 that has file information such as contents file and wishes to 
deliver the file information. In this case, the file information, 
whose validity has been verified, can be delivered to the other 
5 terminal apparatus via the management apparatus 100. 
Accordingly, the management system of the present invention Is 
effective in a case where a terminal apparatus serving as a contents 
file generator requests to deliver its own generated contents file. 

10 (Second Embodiment) 

The following is a description of the second embodiment of 
the present invention. 

The management apparatus 100 of the second embodiment Is 
characterized by a data registration unit 1301 that is provided to 

15 store at least a part of file information uploaded from the request 
reception unit 120. Note that for the components in the 
management apparatus 100, the requester terminal 110, and the 
request reception terminal 120 that have the respective same 
constructions as in the first embodiment, the same numerals are 

20 assigned and no detailed explanation is given. 

Fig. 13 is a functional block diagram of the management 
system that is composed of the management apparatus 100, the 
requester terminal 110, and the request reception terminal 120 in 
the second embodiment. In the second embodiment, the 

25 management apparatus 100 is provided with the data registration 
unit 1301. 

The data registration unit 1301 stores a part of file 
information uploaded from the request reception terminal 120. The 
management apparatus 100 performs the verification processing on 
30 the file information held by the request reception terminal 120 as 
long as the file information is pre-registered in the data registration 
unit 1301. The data registration unit 1301 registers not only the 
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file name but also data itself, thereby increasing the precision in the 
data verification performed by the management apparatus 100. 

Next, an operational procedure performed by the 
management apparatus 100 of the second embodiment is explained. 
5 Fig. 14 Is a flowchart showing the operational procedure from 

the reception of an authorization request signal to the issue of the 
granting information by the management apparatus 100. Note that 
this procedure in the second embodiment is characterized by that 
the management apparatus 100 judges whether the file information 

10 read out from the delivery authorization request signal is 
pre-registered in the data registration unit 1301 (S1407). 

First, the request signal reception unit 102 of the 
management apparatus 100 receives the process authorization 
request signal from the requester terminal 110 (S1401). Then, the 

15 request signal processing unit 104 authenticates the requester 
terminal 110 based on the user ID 603 included in the process 
authorization request signal 600 (S1402). The request signal 
processing unit 104 next obtains the request reception terminal 120, 
that has the requested file Information, from the destination ID 604 

20 and authenticates it (S1403). The request signal processing unit 
104 then interprets the contents of the process authorization 
request signal by reading out the processing object file number 605 
and the processing type number 606 (S1404 and S1405). 

Following this, the request signal processing unit 104 reads 

25 out the relevant file data (S1406), and the management apparatus 
100 of the second embodiment performs the verification processing 
to check if the file name read out from the deliver authorization 
request signal is present in the data registration unit 1301 as the 
pre-registered file information (S1407). By this verification 

30 processing, if the file is not pre-registered in the data registration 
unit 1301 (NO in S1407), the authorization cannot be granted and 
delivery denying signal is issued to the request reception terminal 
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120 (S1412). 

Meanwhile, if it Is the file information pre-registered in the 
data registration unit 1301 (YES in S1407), the relevant information 
confirmation unit 105a confirms the relevant file as well as the 
5 request reception terminal 120 that has the relevant file, based on 
the process authorization request signal. The relevant Information 
readout unit 105b reads out the information relevant to the file 
confirmed by the relevant Information confirmation unit 105a, from 
the data registration unit 1301. 

10 For the data verification, the relevant information 

transmission request unit 105c generates the relevant information 
response request signal 610 and sends it to the request reception 
terminal 120 that has the relevant file (S1408). Next, the relevant 
information reception unit 105d performs processing to receive the 

15 relevant information response from the request reception terminal 
120 (S1409). When receiving the relevant information, the 
relevant information reception unit 105d sends it to the relevant 
information comparison unit 105e- The relevant information 
comparison unit 105e compares the relevant information sent from 

20 the request reception terminal 120 to the relevant Information read 
out by the relevant information readout unit 105b from the data 
registration unit 1301. If these sets of Information are in 
agreement with each other and the received Information Is judged to 
be valid (YES in S1409), the relevant information comparison unit 

25 105e judges whether this comparison processing should be 
performed N number of times at several locations of data for the 
verification (S1410). 

After completing the judgment processing N number of times 
(YES in S1410), the relevant information comparison unit 105e 

30 sends the process granting signal to the information transmission 
unit 103. On the other hand, if judging that the Information Is not 
valid (NO In S1409), the relevant information comparison unit 105e 
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sends a process denying signal to the information transmission unit 
103. 

The information transmission unit 103 sends the process 
granting information or process denying information sent from the 
5 request signal processing unit 104 or the data verification unit 105 
to the requester terminal 110 and the request reception terminal 
120 via the communication unit 101 (S1411 and S1412). 

Note that terminal information may be registered together 
with the data into the data registration unit 1301, and that 

10 authorization conditions may be set for each terminal in the step of 
granting authorization (S1407). 

Fig. 15 a reference diagram of data stored in the data 
registration unit 1301. 

First, as the method for verifying the validity of data to be 

15 delivered between the terminals, the data verification unit 105 
designates an address of the delivery object file so that the data 
verification unit 123 of the request reception terminal 120 responds 
with a value at the designated address as a response. 

For example, when the r elevant information transmission 

20 request unit 105c of the management apparatus 100 sends a 
response request to the request reception terminal 120 to respond 
with a value at the address "'0x0000", the relevant information 
readout unit 124a reads out the data at this designated address and 
responds with the read value to the management apparatus 100. 

25 The relevant information comparison unit 105e compares the 

responded value to the value ''0010 (indicated by 1501)" registered 
in the data registration unit 1301. If the values are verified to be in 
agreement with each other, the relevant information transmission 
request unit 105c further requests the request reception terminal 

30 120 to respond with respective values at the addresses ''0x0004", 
''0x0116", and "OxAAFE". If the values transmitted from the 
terminal 120 are verified to be in agreement respectively with "1010 
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(indicated by 1502)", "1110 (indicated by 1503)", and "0111 
(indicated by 1504)" the data file to be delivered between the 
ternninais is judged to be valid. 

Note that the data registration unit 1301 does not need to 
5 register the whole of file information for the verification performed 
by the data verification unit 105 of the management apparatus 100, 
and that arbitrary addresses and corresponding values that are 
supposed to be described at these addresses may be stored in pairs 
for the data validity verification. Consequently, a memory resource 

10 can be saved and, at the same time, the same effect can be obtained 
as with the case where the whole of file information is registered. 
Also, by changing the designated addresses for each terminal and 
each access time even if the same file is requested, the management 
apparatus 100 can ensure the higher validity of file information. 

15 As the method employed by the relevant information 

comparison unit 105e for the verification of the validity regarding 
the delivery object file information, the request reception terminal 
120 may be requested to transmit an address at which a designated 
data pattern is multiplexed, or the number of the designated data 

20 patterns that are multiplexed in the file. 

Moreover, the management apparatus 100 may store a 
processing history and vary the data verification method depending 
on the stored processing history. For example, if a terminal 
apparatus has performed valid processing over several tens of times 

25 in a row, the management apparatus 100 may lighten and simplify 
the verification processing for this terminal apparatus. Meanwhile, 
If another terminal apparatus performed Invalid processing In the 
past, the management apparatus 100 may Increase the number of 
times and types of the verification processing for this terminal 

30 apparatus. Accordingly, processing efficiency in the file delivery 
executed between the terminals can be increased, and safety can be 
ensured as well. 
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In the management system of the second embodiment as 
described above, the management apparatus 100 includes the data 
registration unit 1301 for registering and managing the file 
information that is to be delivered between the terminals. 
5 Thus, the delivery authorization can be granted only to the 

file Information that is pre-registered in the data registration unit 
1301, and unauthorized file delivery on the network can be 
prevented. Also, since at least a part of the file information that is 
to be delivered is registered into the data registration unit 1301, 

10 there is no need to manage the whole of mass file information such 
as a motion video file. Therefore, the data management can be 
performed by the management apparatus 100 with ease. 

In order to increase the network security, the data format of 
the data registration unit 1301 of the second embodiment may be 

15 defined as an encrypted format, and a key to unlock encryption may 
be delivered only when the file information is validly delivered. 

As an example method to check whether or not it is encrypted 
file information, the data registration unit 1301 may verify the 25^^ 
and 26^^ bits from the top, i.e., transport_scrambling_control bits 

20 multiplexed in the header of a transport stream packet when the 
format of a delivered file is a transport stream defined according to 
MPEG2 Systems standard. 

As a matter of course, the level of security can be increased if 
the management apparatus 100 stores an encryption file to verify 

25 the file contents. The key to unlock the encryption may be given by 
the management apparatus 100, or alternatively, a key server may 
be provided for the key management. 

(Third Embodiment) 
30 The following is a description of the third embodiment of the 

present invention. With a management system of the third 
embodiment, the requester terminal 110 does not send the delivery 
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authorization request to the management apparatus 100, but sends 
the delivery request directly to the request reception terminal 120, 
and the data verification is performed between the management 
apparatus 100 and the request reception terminal 120. 
5 Fig. 16 is a block diagram showing the overall construction of 

the management system of the third embodiment. 

The third embodiment is different from first embodiment in 
that a request reception terminal 1600 that receives a request is 
provided with a request signal issuing unit 1601. 

10 The operational procedure performed by the management 

system of the third embodiment is explained with reference to Fig. 
17. Fig. 17 is a sequence diagram illustrating a general data flow In 
the management system of the third embodiment. Note that the 
management apparatus 100 previously acquires file information 

15 from the request reception terminal 1600, extracts at least a part of 
the file information, and registers the extracted part into the data 
registration unit 1301 (1701). 

First, the request signal issuing unit 113 of the requester 
terminal 110 issues a process authorization request signal to the 

20 request reception terminal 1600 via the communication unit 111 
(1702). 

Then, receiving the process authorization request signal from 
the requester terminal 110, the request signal issuing unit 1601 
sends a process authorization request signal (1703) to the 

25 management apparatus 100. Here, an ID number of the request 
reception terminal 1600 is multiplexed into the user ID included in 
the process authorization request signal. 

The management apparatus 100 then sends a relevant 
information response request (1704) to the request reception 

30 terminal 1600 and, when receiving the relevant information (1705), 
the management apparatus 100 interprets the process authorization 
request signal. As distinct from the stated first and second 
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embodiments, the ID of the request reception terminal 1600 is not 
multiplexed into the process authorization request signal and, 
therefore, the verification processing to authenticate the request 
reception terminal 1600 is omitted. 
5 After completing the data verification processing, the 

management apparatus 100 sends a granting signal only to the 
request reception terminal 1600 (1706). If the Information 
reception unit 122 receives the granting information, the request 
reception terminal 1600 sends the granting Information (1707) to 

10 the requester terminal 110 via the communication unit 121. 
Consequently, processing such as delivery can be executed between 
the requester terminal 110 and the request reception terminal 1600. 

Finally, the request reception terminal 1600 performs the 
data delivery of file information or the like for the requester terminal 

15 110 (1708), where the sequential procedure of the third 
embodiment is terminated. 

Fig. 18 shows an example data construction of a process 
authorization request signal 1800 Issued to the request reception 
terminal 1600 by the requester terminal 110 in the third 

20 embodiment. This process authorization request signal 1800 is 
made up of: a header part 1801; and a data part 1802 Including a 
user ID 1803, a processing object file number 1804, and a 
processing type number 1805. As distinct from the process 
authorization request signal 600 In the first embodiment, the 

25 destination user ID 604 is not included because the requester 
terminal 110 sends the request signal directly to the request 
reception terminal 1600. 

With the stated construction of the management system of 
the third embodiment, the requester terminal 110 sends the process 

30 authorization request signal directly to the request reception 
terminal 1600 which, in turn, sends the file process request signal to 
the management apparatus 100. If the management apparatus 
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100 grants the delivery authorization, the request reception 
terminal 1600 sends the granting information to the requester 
terminal 110. Thus, the management system of the third 
embodiment can manage the validity of file information delivery 
5 performed between the terminals, as a system applicable to various 
communication forms. 

(Fourth Embodiment) 

The following is a description of a management system of the 

10 fourth embodiment. 

In recent years, remote diagnostics of home electrical 
appliances and remote maintenance to upgrade devices such as a 
DVD have been increasingly performed. However, a concern is 
rising with regard to the validity of data received through the remote 

15 maintenance. The fourth embodiment provides a management 
system by which remote maintenance data with a high degree of 
safety can be sent to a service object appliance of a user home. 

In the fourth embodiment, there are a requester terminal, a 
request reception terminal, and a separate appliance, with 

20 combination of which a network is formed. With reference to Fig. 
19, an example is given for a case where the remote maintenance 
such as maintenance and repair is performed for a home electric 
appliance of the user home by a retail appliance store or the like 
using the network. 

25 Fig. 19 shows the overall construction of the management 

system employed for the remote maintenance in the fourth 
embodiment. 

A service center 1901 manages the validity of remote 
maintenance information. A retail appliance store 1902 sends the 
30 remote maintenance data to the electric appliance or the like of a 
user home 1903. The user home 1903 requests the retail appliance 
store 1902 for the maintenance of a TV set 1905, a DVD 1906, and 
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a PC 1907 as well as receiving the remote maintenance data using a 
GW 1904. 

The retail appliance store 1902 receives a request from its 
customer, i.e., the user home 1903, and then performs the remote 
5 maintenance for the appliance of the user home 1903. The retail 
appliance store 1902 first sends a process authorization request 
signal to the service center 1901. The service center 1901 verifies 
the validity of the remote maintenance data and, if the validity is 
verified, sends granting information to the retail appliance store 

10 1902 so that the remote maintenance data is sent to a 
network-capable TV set of the user home 1903, for example. 

In order to prevent a problem where a malicious outsider 
terminal 1908 requests the service center 1901 to perform only the 
authentication processing and then sends irrelevant virus data or 

15 the like, the user home 1903 may separately send a maintenance 
data verification request directly to the service center 1901 using 
the GW 1904 and implements the maintenance processing when the 
verification is received. By doing so, the remote maintenance 
system with a higher level of safety can be realized. Moreover, the 

20 remote maintenance data may be encrypted using a public key or 
the like of the service center 1901. 

As can be understood from the above explanation, using the 
management system of the fourth embodiment, the remote 
maintenance data guaranteed as safe is sent to the user home 1903. 

25 Thus, the stated concern for the user home 1903 in the conventional 
remote maintenance is overcome, and a malicious outsider is 
absolutely prevented from conducting an unauthorized access that 
is ''disguising" to deliver invalid maintenance data or the like. 

Note that a register list of the terminals serving as file holders 

30 may be stored together with the file names and the file contents in 
the data registration unit 1301 of the management apparatus 100. 
Every time a contents file is delivered from a terminal 
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apparatus to the management apparatus 100, the file delivery 
source is added to the register list so as to update the list. As a 
result, the management apparatus 100 can always locate a file 
holder of the file information that is to be delivered between the 
5 terminals. 

When the process authorization request signal is received 
from the requester terminal 110, the management apparatus 100 
searches the register list for the terminal that holds the requested 
contents file, selects the appropriate requester reception terminal 

10 120, and notifies the requester terminal 110 of the request 
reception terminal 120 as the search result. 

When receiving the information regarding the requester 
terminal 120 by the communication unit 111, the requester terminal 
110 performs the same processing as is the case in the third 

15 embodiment. Specifically, by sending the process authorization 
request signal to the request reception terminal 120 that is notified 
by the management apparatus 100, the requester terminal 110 can 
acquire the desired file delivery. 

It should be noted here that after selecting the appropriate 

20 request reception terminal 120 from the register list according to 
the received process authorization request signal from the requester 
terminal 110, the management apparatus 100 may perform the data 
verification processing directly for the request reception terminal 
120 that is the contents file holder, as is the case in the first 

25 embodiment. 

Accordingly, since the management apparatus 100 searches 
the register list for the request reception terminal 120, the 
requester terminal 110 can safely acquire the desired file 
information from the request reception terminal 120 that is the 

30 contents holder without having to know the information regarding 
the request reception terminal 120. For the case of searching the 
register list for the request reception terminal 120, the destination 
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user ID 604 does not need to be multiplexed into the process 
authorization request signal and can be left blank. 

Also note that when verifying the file information that is to be 
delivered between the terminals, the management apparatus 100 
5 may verify only information stored in a specific memory area of the 
request reception terminal 120. Thus, the verification processing 
object may be only the information stored in the specific memory 
area of the request reception terminal 120. 

Moreover, the specific memory area (not shown) provided in 

10 the terminal apparatuses explained in the above-stated embodiment 
for storing processing object file can be made up of either a general 
memory unit or memory unit equipped with a security function such 
as access control, depending on to the expected level of reliability of 
the information. The specific memory area may be formed or 

15 designated by the user, or alternatively, may be generated using a 
program of the terminal apparatus. 

Accordingly, when receiving the authorization request signal 
from the terminal apparatus that starts the processing, the 
management apparatus of the present invention performs the 

20 verification processing using at least a part of the data that is a 
processing object between the terminals. Therefore, the 
processing load of the data management and data verification can 
be lightened for the management apparatus side. 

After performing the verification processing, the 

25 management apparatus sends a granting signal to the terminal 
apparatus when the validity is verified and sends a denying signal 
when the validity is not verified. Thus, the management system 
can be realized with the flexibility in the data processing performed 
between the terminals. 

30 The requester terminal of the present invention only sends 

the delivery authorization request signal to the management 
apparatus, and the actual data verification is performed between the 
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management apparatus and the request reception terminal. 
Therefore, the requester terminal can acquire the validity-verified 
data from the request reception terminal under no heavy load. 

Also, because the validity of processing object data is always 
5 verified by the management apparatus, no area needs to be 
provided specifically for the data verification in the terminal 
apparatuses. Thus, resources and load of the terminal apparatuses 
are reduced, resulting in the increase in reliability of the data 
exchange between the terminals via the network. 

10 Moreover, the management apparatus stores the file name 

and at least a part of the file information that is to be exchanged 
between the terminals, and rejects the processing of file information 
that is not pre-registered under authorization. By doing so, the 
reliability of the data exchange between the terminals via the 

15 network can be increased. 

Furthermore, since the management apparatus verifies 
whether or not the data delivery, movement, etc. is to be authorized, 
the data processing history of the terminals can be managed and 
controlled. Thus, the reliability of data exchange between the 

20 terminals via the network can be increased. 
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